Viewing Kerberos Tickets

Not all tickets are alike. One ticket might, for example, be forwardable. Another ticket might be postdated. While
a third ticket might be both forwardable and postdated. You can see which
tickets you have, and what their attributes are, by using the klist command
with the -f option:

% /usr/bin/klist -f

The following symbols indicate the attributes that are associated with
each ticket, as displayed by klist:

The following example shows how to display the encryption types of the
session key and the ticket by using the -e option. The -a option is used to map the host address to a host name if the name
service can do the conversion.